This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File:                     uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier:          qFjMT647syW6guY4VLxTElwQ+FD6fN19shogp8zp/Zw=
Subject key identifier:   E4:DC:F8:D0:CA:CD:12:9F:7E:9D:EA:ED:DA:91:85:58:A6:58:58:4D
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer:       /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number:          0FC4
Signing time:             Sat 24 Jan 2026 20:34:35 +0000
Manifest this update:     Sat 24 Jan 2026 20:34:35 +0000
Manifest next update:     Sat 31 Jan 2026 20:34:35 +0000
Files and hashes:         1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: cjvbh6z110xiibwLEloUMKzNaAjqqQ0xGRoaB+aanRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
        Validity
            Not Before: Jan 24 20:34:35 2026 GMT
            Not After : Jan 31 20:34:35 2026 GMT
        Subject: CN=69752cdb-929c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:89:07:3f:0b:e4:04:8e:7c:c9:02:f8:26:
                    f3:91:7e:f8:44:bd:f0:1a:03:4c:ac:6d:c6:72:7a:
                    78:ad:54:e2:1e:b1:ce:9b:82:63:b8:c6:14:da:a5:
                    8f:3e:42:3b:fc:ec:91:cd:3e:75:32:ed:a9:a8:5f:
                    d8:75:7b:f0:17:8c:7d:94:82:c2:ec:e0:3e:ab:b7:
                    e6:57:4c:0d:c4:09:b3:76:55:d0:36:c2:94:b6:56:
                    32:20:e5:fc:e4:e6:8d:2c:92:52:3f:7d:60:4b:42:
                    58:7a:af:1a:92:40:98:11:0a:f9:7c:98:9d:d3:73:
                    ff:19:84:17:a9:78:5c:38:f8:d7:fe:d5:d5:ad:a4:
                    6f:f3:4d:70:fc:de:9a:ed:b2:2e:d0:b6:81:5b:84:
                    a0:05:ce:67:02:af:45:ba:dd:f8:35:c1:e3:f2:ca:
                    27:19:f0:9a:bc:7f:df:66:bc:6e:24:83:43:d5:0b:
                    e0:bb:92:70:6c:68:bc:52:93:67:96:11:2d:e4:cc:
                    af:ef:39:84:02:13:02:0a:ba:6f:be:af:8b:c8:bd:
                    54:f1:55:16:9a:54:cf:be:e9:11:76:68:b6:2c:06:
                    c5:69:d5:c4:34:78:44:6a:dd:a1:5c:54:44:93:67:
                    53:03:77:a3:8f:d7:e0:23:5c:a3:40:96:e4:6b:65:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:F8:D0:CA:CD:12:9F:7E:9D:EA:ED:DA:91:85:58:A6:58:58:4D
            X509v3 Authority Key Identifier:
                keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:ae:c3:69:8c:82:8b:ac:69:f6:0c:94:a8:13:78:4b:77:
         fb:60:6f:a3:c2:27:bb:d3:06:84:8e:91:12:46:b2:22:a4:77:
         8b:9d:d6:0a:fe:2b:5e:15:0a:58:c1:fa:32:3e:10:9e:46:f6:
         25:1e:dd:05:3e:fe:e8:4b:5a:bc:91:3a:4a:0f:09:17:dc:e9:
         3b:46:90:57:4b:c1:f3:5d:45:a1:c4:a8:85:46:12:3c:84:39:
         e2:00:2a:16:c3:2c:70:f1:a6:b2:0f:71:6d:c1:17:f0:d2:ba:
         5c:98:0a:c0:e2:10:a2:a3:bf:cb:fa:c3:6a:c4:27:52:88:54:
         8e:39:7e:84:22:84:42:a9:7b:e0:66:bf:9b:c7:4d:a1:2c:6c:
         dd:0e:12:8e:49:4d:9b:fe:28:24:b7:66:1b:1a:a8:8b:e6:de:
         02:cb:5e:61:30:50:5a:61:cb:cb:0f:00:03:c5:0c:3c:fd:94:
         1b:1a:da:e7:d9:a7:84:95:ba:55:e8:de:3b:36:f9:99:b7:bc:
         12:f3:65:91:e1:de:71:51:af:d6:5d:ad:92:58:89:b9:0c:93:
         44:75:27:da:20:9b:40:c5:e6:28:b3:7a:27:78:2e:70:bd:a6:
         61:ca:c5:c8:b2:7e:53:83:79:f9:84:ce:b6:4b:c1:99:a6:be:
         60:18:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:38 2026 by rpki-client